AI incident playbooks need evidence files
NIST’s critical-infrastructure AI RMF concept note and the European Commission’s GPAI serious-incident template point to the same control gap: teams need retrievable lifecycle, supply-chain, risk, and incident facts before a failure or challenge arrives.